rrdcached is a caching daemon for rrdtool. It's typically
used in large installations. Small embedded systems might
not use it at all. Splitting it out allows a systems builder
to remove a daemon process running as root.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Now that the processes no longer runs as root, we need to increase
the limit for it.
This only affects systemd based systems.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Running a network facing daemon written in C as root is not
a good idea. Introduce a redis system user/group for that.
A drawback is that now redis can no longer increase the
number of open fds to 10000 (MaxClients). If this is needed
the ulimit needs to be tweaked in the init script or systemd
unit file.
This only affects systemd based systems.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Creating /var/log/redis.log requires root permissions to
create the file. Use syslog instead so redis does not
require root.
This affects both sysv and systemd based systems.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Binding it to localhost is a safe default.
This affects both sysv and systemd based systems.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
The redis.conf is changed on the fly to not daemonize redis.
The reason for that is that with this appraoch we don't need
special permissions to write to /var/run/.
Signed-off-by: Frank Meerkoetter <frank@meerkoetter.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
gnome-common is deprecated and gnomebase.bbclass will soon stop depending on it,
so add gnome-common to DEPENDS for the recipes that still use it.
gxim previously wasn't really using the gnome-common macros so now the build
fails with compiler errors, so pass the flag to turn off fatal warnings as gxim
appears to be dead.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
gnome-common is deprecated and gnomebase.bbclass will soon stop depending on it,
so add gnome-common to DEPENDS for the recipes that still use it.
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
getVar() now defaults to expanding by default, thus remove the True
option from getVar() calls with a regex search and replace.
Search made with the following regex: getVar ?\(( ?[^,()]*), True\)
Signed-off-by: Joshua Lock <joshua.g.lock@intel.com>
Add PACKAGECONFIG for 'qt4' and default to not enable it as there's
do_compile failure when qt4 is enabled.
The obsolete '--without-lisp-files' option is removed.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Check for files first before operating on it
Fixes QA errors like below
/usr/lib/python2.7/site-packages/plist/__init__.py
/usr/lib/python2.7/site-packages/plist/_plist.so
/usr/lib/python2.7/site-packages/plist/plist.py
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
libplist: 3 installed and not shipped files. [installed-vs-shipped]
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
enable_tls_ptests.patch is removed as the problem has been fixed in new version.
fix_build_with_musl.patch is removed as it's no longer suitable.
The file it fixes is not even there any more.
Several necessary runtime dependencies are added to rsyslog-ptest.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This is a project under rsyslog. Add its recipe as it's needed by
the new version of rsyslog.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
This is a project under rsyslog. Add its recipe as it's needed
by new version of rsyslog.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Improved build, tests and documentation.
New features: functions and macros (*pack, *foreach, *string*, *alloc*)
Security fixes: CVE-2013-6401
Bugfixes:
- Number parsing and overflows
- Fix l_isxdigit() macro (#97).
- Check for NULL key in json_object_get() and json_object_del() (#151).
- Enhance hashtable seeding on Windows (#162).
- json_unpack(): Allow mixing JSON_STRICT with optional keys (#162, #163).
- Fix int/int32 mismatch (#142).
- Parse subnormal numbers correctly (#202).
- Fix a crash when parsing inputs consisting of very deeply nested arrays or objects (#282, #284).
- Never convert numbers to integers in the parser when JSON_DECODE_INT_AS_REAL is set (#212).
- Handle out-of-memory situations gracefully in the hashtable implementation (#298).
The copyright date in the LICENSE file was updated for 2016.
Signed-off-by: Igor Socec <igor.socec@pelagicore.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Mozjs is mozillaware, meaning that it barely works on x86 and is plain broken on everything else. This time mozjs assumes that noone will ever have more than 47bit for VA, breaking aarch64 which can have more. Thanks to polkit developers using mozjs systemd will crash early during boot when using polkit.
Signed-off-by: Koen Kooi <koen.kooi@linaro.org>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* fix CVEs CVE-2014-3634, CVE-2014-3683
* rebase the patch use-pkgconfig-to-check-libgcrypt.patch
* backport fixes for build error:
lexer.l:34:14: error: expected identifier or '(' before '__extension__'
* replace the old configure option '--enable-cached-man-pages' with
'--disable-generate-man-pages'
Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Heap-based buffer overflow in the parse_packet function in network.c in
collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to
cause a denial of service (daemon crash) or possibly execute arbitrary
code via a crafted network packet.
Signed-off-by: Alexandru Moise <alexandru.moise@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Previously, we tweak gcc option for gold linker to workaround
link failure, it caused shared object dependencies missing
while non gold linker:
Print shared object dependencies in target:
......
root@localhost:~# ldd /usr/sbin/efibootmgr
linux-vdso.so.1 (0x00007ffdbbbe4000)
libc.so.6 => /lib64/libc.so.6 (0x00007fce48355000)
PIC => not found
libefivar.so.0 => /usr/lib64/libefivar.so.0 (0x00007fce4813d000)
PIC => not found
libefiboot.so.0 => /usr/lib64/libefiboot.so.0 (0x00007fce47f33000)
/lib64/ld-linux-x86-64.so.2 (0x00007fce486f2000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007fce47d2f000)
......
The efivar dynamic library missing PIC option. Do not apply
gold linker fix while non gold linker.
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
These warnings are observed when testfloat is cross-compiled with certain
external toolchains.
Signed-off-by: Fahad Usman <fahad_usman@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Getting your config nuked everytime you update collectd is annoying, so
properly tag it as CONFFILES.
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
These warnings are observed when testfloat is built with certain
external toolchains.
Signed-off-by: Fahad Usman <fahad_usman@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Add LDFLAGS variable to Makefile so that extra linker flags can be sent
via this variable.
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
